Collapse[.]zip | Triage

Resubmissions

13/08/2024, 15:47

240813-s8mblsscqg 7

13/08/2024, 15:46

240813-s7zkjsscnb 7

Sharing

Copy URL Twitter E-mail

General

Target

Collapse.zip
Size

503KB
MD5

6a766e1b8c42551300755869f0697780
SHA1

496a75b1b08b3e0c696fd4c0d7432dbd19899a79
SHA256

e4186597b61edd5748f67766f11482a4e8c83c066905c9fb98114262e2f0d2cc
SHA512

11fe0a5348ec5d3743c17601589c347757bc07967c8e534c27c6cfb149cba1c3b7a1fb0db2f6dd8d227034d2913885eb35bd94098af31f8061c74bc1249762b0
SSDEEP

12288:/azQv2RLICcfbjD+NtPwOPg+KqqhuYKDEfzDuBKO6YlbP:/azQv6MRDjD+NtvP0qqhuYz+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Collapse/Loader.exe

Files

Collapse.zip
.zip
Collapse/Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Collapse/config.ini
Collapse/main.dll